milka-testdev[.]pages[.]dev

This domain, milka-testdev.pages.dev, was registered on 19 April 2026 through Cloudflare, Inc. and is served from Cloudflare’s network (IP 188.114.97.3, CA). The authoritative nameservers are clint.ns.cloudflare.com and joyce.ns.cloudflare.com. HTTP requests return status 200 and the site enforces HSTS, advertises support for HTTP/3, and loads client‑side libraries crypto‑js and cdnjs from the same CDN. The TLS certificate presented is issued by Google Trust Services (WE1), a mismatch that is commonly used to lend credibility to brand‑impersonation campaigns. The page title reported by scanners is “Airdroр”, and the listed scam type is brand impersonation targeting Google. The domain has been added to a single security blocklist and is already blocked by PhishDestroy; Gridinsoft assigns it a trust score of 0 / 100. No malware detections have been reported, but the absence of detections does not imply safety. Current intelligence does not include a content‑level analysis, so the exact payload or credential‑harvesting mechanisms remain unknown. Defenders should consider adding the hostname to deny‑list rules, enforce strict TLS validation, and monitor for any traffic patterns that resemble credential submission to Google services originating from this host. Ongoing observation is advised until the investigation concludes.